Game privacy policy

Humpty Dumpty Toys Ltd (“we”, “us”) is a company registered in England, trading from 12 Wickham Street, Bristol BS8 2QT. We are the data controller for anything described in this policy.

In this policy, the Game means the browser game published by us at humptytoys.store/game, including every level, mini-game and saved-progress feature inside it.

This policy covers the Game only. Buying something from the shop is a different matter with different data — that is covered by our main privacy policy, and by our cookie policy.

Effective from 6 September 2026. Version 1.0.

The Game runs entirely on your device. It has no sign-in, no server of its own and no way to send anything back to us. We have deliberately built it that way, because it is played by children.

• We collect no personal data through the Game — none at all.
• There are no accounts, usernames, profiles or friend lists.
• There is no advertising, no analytics and no third-party code.
• Your progress is saved in your own browser and stays there.
• Nothing is sold, rented or shared with anyone.

Through the Game itself, we collect no personal information. To be specific, we do not ask for, receive or store any of the following:

• Names or usernames
• Email addresses
• Phone numbers
• Postal addresses
• Dates of birth or ages
• Photographs, audio or video
• Location or GPS data
• Contacts or address books
• Device identifiers or advertising IDs
• Payment or card details

There is no text chat, no comment box and no upload button in the Game, so there is no route by which a child could share personal information with us or with anyone else even if they wanted to.

So that a child does not lose their progress when they close the tab, the Game saves a small amount of information using your browser’s local storage. That information is:

• Which levels have been completed and any score or star rating.
• Sound and music on or off, and any accessibility preference such as reduced motion.
• Where the player had got to, so the Game can resume in the right place.

This data is written by your browser, stored on your own device, and read only by the Game. It is never transmitted to us, to any server, or to any other company. We cannot see it, and we could not retrieve it if we tried.

You can delete all of it at any moment by clearing site data for this site in your browser settings, or by using the reset option inside the Game. See section 15 for step-by-step instructions.

The Game is intended to be played by children, and it has been designed so that playing it does not require giving up any information.

United States — COPPA. We comply with the Children’s Online Privacy Protection Act. We do not knowingly collect personal information from children under 13. Because the Game collects no personal information from anybody, there is nothing for which verifiable parental consent would be required, and nothing for a parent to request, review or ask us to delete from our systems.

United Kingdom and EU — UK GDPR, GDPR and the Children’s Code. Article 8 of the UK GDPR and the GDPR sets an age below which a child cannot consent to information society services on their own. That threshold is not engaged here, because we do not rely on consent — or on any other lawful basis — to process children’s personal data, since we do not process any. We have also followed the ICO’s Age Appropriate Design Code: the Game defaults to the most privacy-protective settings, uses no nudge techniques, contains no behavioural advertising and does not profile children.

If you believe a child has somehow provided us with personal information, please write to privacy@humptytoys.store and we will delete it immediately and confirm to you that we have done so.

The Game contains:

• No advertising of any kind, including no rewarded video and no interstitials.
• No advertising identifiers, no fingerprinting and no cross-site tracking.
• No analytics or telemetry SDK — not Google Analytics, not Firebase, not Crashlytics, not any other.
• No social media plugins, share pixels or login buttons.
• No profiling and no automated decision-making that produces any effect on a player.
• No in-app purchases, no subscriptions and no currency of any kind.

We do not respond to “Do Not Track” browser signals for the simple reason that we do not track anyone in the first place, with or without a signal.

The Game requests no device permissions. It does not ask for the camera, the microphone, the location, the photo library, contacts, notifications, Bluetooth or motion sensors. If a prompt for any of these ever appears while you are playing, it did not come from us — close the page and let us know.

The Game sets no cookies. It uses local storage, described in section 4, which is a different mechanism: it is not sent with network requests and it cannot be read by other sites.

Other parts of this website do use a small number of cookies, and those are listed in our cookie policy. Blocking cookies entirely will not affect the Game.

We want to be straight with you about the one piece of data that does exist, because it exists for every website ever visited.

The Game is delivered to your browser over the internet by our hosting provider. Like any web server, theirs records standard technical request logs: the IP address the request came from, the time, the file requested, and the browser’s user-agent string. These logs are generated by the act of loading a web page, not by playing the Game, and they contain nothing about what happens inside it.

We use those logs only to keep the site online and secure — spotting outages, abuse and attacks. We do not use them to build a profile, we do not combine them with anything else, and we do not attempt to identify individual players from them. Our lawful basis is our legitimate interest in operating a secure website (UK GDPR Article 6(1)(f)). Logs are retained by our provider for a short rolling period and then discarded.

We do not sell personal information. We do not rent, trade or share it for advertising or for anyone else’s marketing, and we never have. We hold no personal information from the Game to share in the first place.

The only third party involved at all is our hosting provider, described above, which acts as our processor under a contract that requires it to process data only on our instructions.

If our business were ever sold or restructured, there would be no player data to transfer with it.

The whole site, including the Game, is served over HTTPS, so the connection between your device and our host is encrypted. The Game’s code runs in your browser’s sandbox and cannot read files on your device or data belonging to other websites.

The strongest security measure here is a structural one rather than a technical one: data that is never collected cannot be breached, leaked or stolen.

We keep no personal data from the Game, so there is no retention period to state for it. Saved progress remains in your browser until you or the browser clears it, and is entirely under your control. Server logs described in section 9 are kept by our provider for a short rolling period and then deleted automatically.

Because no personal data is collected from the Game, there is nothing to transfer internationally. The technical server logs may be processed on infrastructure outside the United Kingdom; where that happens, the transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

Under the UK GDPR and the EU GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to know what is collected, to delete it, to correct it, to opt out of its sale or sharing, and not to be discriminated against for exercising any of those rights.

In practice these rights are quickly satisfied here: we hold no personal data about players, so a request would be answered by confirming exactly that. We have no “sale” or “sharing” of personal information to opt out of, and we do not use sensitive personal information at all.

To exercise any right, or to ask us to confirm what we hold, email privacy@humptytoys.store. We respond within 30 days and usually within the same week, free of charge.

You do not need to do anything to protect your child’s privacy in this Game — there is nothing being collected. If you would still like to clear the saved progress from the device, here is how:

• Inside the Game: open Settings and choose "Reset progress". This clears everything the Game has saved.
• Safari on iPhone or iPad: Settings → Safari → Advanced → Website Data → find this site → Delete.
• Chrome on Android or desktop: Settings → Privacy and security → Third-party cookies → See all site data → find this site → Delete.
• Any browser, quickest route: open the Game, press Ctrl+Shift+Delete (Cmd+Shift+Delete on a Mac) and clear cookies and site data.

Clearing site data removes the saved progress permanently and it cannot be recovered by us, because we never had a copy.

If you have a question about the Game and your child, we would genuinely rather you asked. Write to privacy@humptytoys.store and a person will reply.

If we change the Game in a way that affects this policy — for example if we ever added an online leaderboard — we will update this page, change the “last updated” date at the top, and publish a notice on the Game’s start screen before the change takes effect.

We will never start collecting personal data from children retrospectively under an old version of this policy. If a change ever required consent, we would ask for it first.

For anything to do with this policy, contact our privacy team:

If you are in the UK and you are not happy with how we have handled your request, you have the right to complain to the Information Commissioner’s Office at ico.org.uk. If you are in the EU, you may complain to your national supervisory authority. We would appreciate the chance to put it right first.